Introduction

In order to help Android developers have an automated security testing/assessment solution in the form of SAST (Static Application Security Testing), this article is intended to share the details of the FindBugs security plugin (FindSecBugs), which helps to uncover security vulnerabilities within compiled Java bytecode in Android apps, and can be integrated with Jenkins (CI).

Problem Faced

With the fast pace of development in the Agile world comes

1. A lack of focus on security from Android developers.
2. Critical vulnerabilities found in Android apps, which impact businesses’ and companies’ reputations.
3. Code quality compromised by missing SAST capability.
4. Customer trust lost when security vulnerabilities are found.
5. Lacking security in the Android SDLC.

Read full news article on Dzone